164 matches found
CVE-2005-2949
The CVE-2005-2949 entry concerns the PAM module pam_per_user prior to version 0.4. The issue is that it does not verify if the user name changes between authentication attempts and reuses the same subrequest handle, enabling attack scenarios where an attacker (remote or local) could log in as ano...
CVE-2002-1758
PHProjekt 2.0 through 3.1 allows remote attackers to view or modify data via requests to certain scripts that do not verify if the user is logged in...